FiltersDone

Question type

Essay

Multiple Choice

Short Answer

True False

Matching

Exam 4: Information Security Policy

Show Answer

Share

---

All types

Filters

Study FlashcardsPractice ExamLearn

Question 31

Essay

Review LaterAdd Note

Review Later

What is a SysSP and what is one likely to include?

Correct Answer

verified

SysSPs often function as standards or pr...

View Answer

Show Answer

Question 32

Multiple Choice

Review LaterAdd Note

Review Later

Which of the following is NOT among the three types of InfoSec policies based on NIST's Special Publication 800-14?

A) Enterprise information security policy
B) User-specific security policies
C) Issue-specific security policies
D) System-specific security policies

E) All of the above
F) B) and D)

Correct Answer

verified

Show Answer

Question 33

True/False

Review LaterAdd Note

The 'Authorized Uses' section of an ISSP specifies what the identified technology cannot be used for.

Which section of an ISSP should outline a specific methodology for the review and modification of the ISSP?

Technology is the essential foundation of an effective information security program​._____________

What are configuration rules?Provide examples.

What is the final component of the design and implementation of effective policies?Describe this component.

The three types of information security policies include the enterprise information security policy,the issue-specific security policy,and the ____________________ security policy.

List the major components of the ISSP.

Examples of actions that illustrate compliance with policies are known as laws.

A section of policy that should specify users' and systems administrators' responsibilities.

An organizational policy that provides detailed,targetedguidance to instruct all members of the organization in the use of a resource,such as one of itsprocesses or technologies.

A detailed outline of the scope of the policy development project is created during which phase of the SecSDLC?

According to NIST SP 800-18,Rev.1,whichindividual is responsible for the creation,revision,distribution,and storage of the policy?

A(n)____________________,which is usually presented on a screen to the user during software installation,spells out fair and responsible use of the software being installed.

In the bull's-eye model,the ____________________ layer is the place where threats from public networks meet the organization's networking infrastructure.